Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa
File:                     69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa (raw, json)
Hash identifier:          TYRDTNjqxg0PuE+DH1sI1+dtTghA4TMFY/hVEcafa5I=
Subject key identifier:   68:8D:35:8A:7B:A3:DF:49:16:B7:49:21:2E:FD:91:E8:8B:B6:47:AF
Certificate issuer:       /CN=560b4c54-bd35-46e1-8698-aff50195e1b4
Certificate serial:       010D0C9F4328584AFEE6A87B86C0B647B4749140
Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     396163
IP address blocks:        149.248.72.0/22 maxlen: 24
                          205.142.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a8:7b:86:c0:b6:47:b4:74:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=8f3a8c7f-12f2-4a73-9809-dd3525e6ee68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:4c:90:0f:c6:2c:fd:f4:2e:74:34:ba:d4:
                    a1:53:cf:25:3b:43:c6:ce:59:2c:27:50:5c:d7:58:
                    a8:f9:cb:c5:04:14:67:21:e1:63:f7:81:a1:b1:b0:
                    2b:7c:81:d6:d2:00:a0:8f:1a:25:9a:56:90:7e:ec:
                    99:9a:c4:e2:4b:f9:a2:b2:86:14:aa:ff:2c:8e:2a:
                    1b:72:fc:b6:c2:1c:c1:ba:de:ad:e6:3b:a2:8c:52:
                    67:71:b6:87:af:c3:77:4f:a4:eb:75:b3:2d:b1:28:
                    6f:6a:72:ab:40:85:9e:95:8f:33:c6:a1:5f:e4:a7:
                    a7:b8:2a:36:77:51:8d:e9:a2:de:65:9f:61:a8:6d:
                    1d:d9:c3:6d:53:1a:e0:91:20:4c:fd:df:ae:93:f5:
                    19:b6:09:62:50:35:7f:26:1f:3a:c7:b7:3b:38:ca:
                    33:f8:d6:07:26:e2:38:fc:af:30:c7:46:36:e5:13:
                    37:8b:1f:89:91:7b:90:46:20:3d:15:4a:f0:38:91:
                    62:b9:b1:0a:56:df:b3:13:ae:d7:5d:2a:d1:0e:ef:
                    3e:e4:cb:3b:40:0f:f1:3c:70:8a:c3:59:44:c3:5a:
                    42:e8:44:9e:88:be:02:ca:d9:72:75:21:22:16:79:
                    aa:61:ad:10:ae:1b:5f:6b:76:da:ad:b2:71:c3:05:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8D:35:8A:7B:A3:DF:49:16:B7:49:21:2E:FD:91:E8:8B:B6:47:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.72.0/22
                  205.142.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:1a:a3:ed:41:c0:9d:e2:f8:8d:df:5a:b8:c0:f8:d0:60:
         5f:8e:b9:01:05:5d:33:d3:51:2a:97:3f:b1:1a:51:f2:5a:ba:
         7f:0a:49:fa:48:1f:fc:b0:b7:7b:cf:96:89:7a:a6:3a:7b:36:
         2f:ea:45:f9:62:06:20:9c:73:64:90:d1:eb:0d:96:d4:73:20:
         6d:ef:c2:a2:4e:42:8b:95:87:1b:50:d9:e7:2e:c8:95:b3:db:
         1c:02:f2:5b:ef:1c:ce:8d:6c:38:93:76:e4:42:9b:67:b9:00:
         e4:f2:98:a3:b0:b7:ab:07:a1:03:f1:08:65:69:eb:c4:63:0f:
         03:10:60:a9:f2:60:24:f7:92:c8:ff:55:19:00:52:ed:f6:60:
         c9:dd:cc:8f:6e:c3:fa:31:7e:2e:f5:0e:9f:d1:50:ca:7f:70:
         dd:e6:ac:97:0e:6b:67:a5:90:1d:e4:cc:fb:0a:69:b5:e5:bc:
         cd:3f:53:ae:a4:e1:56:c0:35:12:fc:e5:f6:00:58:fa:45:e9:
         dc:2b:02:90:76:25:7f:f7:78:5d:86:f1:58:3a:ef:c2:49:05:
         f1:71:ae:9c:20:88:3f:57:88:ed:7d:6e:cc:02:cd:3e:64:88:
         cb:d3:32:96:14:9b:14:5e:aa:2e:9b:2f:3d:50:19:f9:4a:f4:
         4e:b4:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:37:14 2025 by rpki-client